| CVE-2026-42203 |
LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format
|
8.6
High
|
May 8, 2026 |
| CVE-2026-42271 |
Exploited
BerriAI LiteLLM Command Injection Vulnerability
|
8.7
High
|
May 8, 2026 |
| CVE-2026-40217 |
LiteLLM through 2026-04-08 allows remote attackers to execute arbitrary code via bytecode rewriting at the…
|
8.8
High
|
Apr 10, 2026 |
| CVE-2026-35030 |
LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format
|
9.4
Critical
|
Apr 6, 2026 |
| CVE-2026-35029 |
LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format
|
8.7
High
|
Apr 6, 2026 |
| CVE-2026-33634 |
Exploited
Aquasecurity Trivy Embedded Malicious Code Vulnerability
|
9.4
Critical
|
Mar 23, 2026 |
| CVE-2024-6587 |
A Server-Side Request Forgery (SSRF) vulnerability exists in berriai/litellm version 1.38.10
|
7.5
High
|
Sep 13, 2024 |
| CVE-2024-42679 |
SQL Injection vulnerability in Super easy enterprise management system v.1.0.0 and before allows a local attacker to…
|
7.8
High
|
Aug 15, 2024 |
| CVE-2024-5710 |
berriai/litellm version 1.34.34 is vulnerable to improper access control in its team management functionality
|
5.3
Medium
|
Jun 27, 2024 |
| CVE-2024-5751 |
BerriAI/litellm version v1.35.8 contains a vulnerability where an attacker can achieve remote code execution
|
9.8
Critical
|
Jun 27, 2024 |
| CVE-2024-4888 |
BerriAI's litellm, in its latest version, is vulnerable to arbitrary file deletion due to improper input validation on…
|
6.5
Medium
|
Jun 6, 2024 |
| CVE-2024-4890 |
A blind SQL injection vulnerability exists in the berriai/litellm application, specifically within the '/team/update'…
|
4.9
Medium
|
Jun 6, 2024 |
| CVE-2024-4889 |
A code injection vulnerability exists in the berriai/litellm application, version 1.34.6, due to the use of…
|
7.2
High
|
Jun 6, 2024 |
| CVE-2024-4264 |
A remote code execution (RCE) vulnerability exists in the berriai/litellm project due to improper control of the…
|
9.8
Critical
|
May 18, 2024 |
| CVE-2024-2952 |
BerriAI/litellm is vulnerable to Server-Side Template Injection (SSTI) via the `/completions` endpoint
|
9.8
Critical
|
Apr 10, 2024 |